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SYSTEMS AND METHODS OF PROVIDING REDUNDANT COMMUNICATION 

TO AN ELECTRONIC DEVICE 

CROSS-REFERENCE TO RELATED DOCUMENTS 

[0001] This application contains subject matter that may be related to the doctoral 
dissertation, "Redundancy Manager for Subsea Control Systems" by Baha T. Tanju. The 
above referenced dissertation is to be submitted to Kennedy Western University after the 
filing of this Application and is hereby incorporated by reference. 

BACKGROUND 

[0002] Modern petroleum exploration and drilling systems (hereinafter referred to as 
"petroleum mining systems") may implement electronic-based tools in remote locations (e.g., 
downhole locations or subsea locations). For example, the tools may comprise sensors, 
actuators, motors, drills, or other electronic-based tools. To communicate with and/or control 
the tools, a user interface such as a computer at the earth/sea surface may be employed. If the 
ability to communicate with and/or control the tools is lost or delayed, undesirable costs may 
be incurred. For example, the costs may be associated with replacing or repairing at least 
part of a petroleum mining system. The costs also may be associated with downtime of the 
petroleum mining system. 

[0003] To reduce the frequency of incurring such costs, some petroleum mining systems 
implement redundant electronics to communicate with and/or control the remote tools. For 
example, an existing petroleum mining system may implement multiple user interfaces 
having a programmable logic controller (PLC) assigned to each user interface. Therefore, if 
one PLC malfunctions, or is otherwise inoperable, another PLC may be configured to 
transmit data from a user interface to the remote tools. However, implementing the 
redundant PLC system is expensive. Moreover, improvements in the reliability of petroleum 
mining systems are desirable. 

SUMMARY 

[0004] In at least some embodiments a system may comprise a first master device, a second 
master device, a redundancy manager coupled to the first and second master devices, and a 
slave device coupled to the redundancy manager. The redundancy manager is operable to 
receive a first data stream from the first master device and a second data stream from the 
second master device. The redundancy manager is further operable to selectively forward 
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one of the first and second data streams to the slave device according to a prioritization of 
factors calculated to optimize an amount of valid communication to the slave device. 

BRIEF DESCRIPTION OF THE DRAWINGS 
[0005] For a detailed description of various embodiments of the invention, reference will 
now be made to the accompanying drawings in which: 

[0006] Figure 1 illustrates a petroleum mining system in accordance with preferred 
embodiments of the invention; 

[0007] Figure 2 illustrates a block diagram of a redundancy manager in accordance with 
preferred embodiments of the invention; 

[0008] Figure 3 illustrates another petroleum mining system in accordance with preferred 
embodiments of the invention; 

[0009] Figure 4 illustrates a dual-redundant tool that may be used with the petroleum mining 
system of Figure 3; and 

[0010] Figure 5 illustrates a method in accordance with preferred embodiments of the 
invention. 

NOTATION AND NOMENCLATURE 
[0011] Certain terms are used throughout the following description and claims to refer to 
particular system components. As one skilled in the art will appreciate, companies may refer 
to a component by different names. This document does not intend to distinguish between 
components that differ in name but not function. In the following discussion and in the 
claims, the terms "including" and "comprising" are used in an open-ended fashion, and thus 
should be interpreted to mean "including, but not limited to...". Also, the term "couple" or 
"couples" is intended to mean either an indirect or direct electrical connection. Thus, if a first 
device couples to a second device, that connection may be through a direct electrical 
connection, or through an indirect electrical connection via other devices and connections. 

DETAILED DESCRIPTION 
[0012] Embodiments of the invention are directed to systems and methods of providing 
redundant data communication to one or more electronic slave devices. As used herein, an 
electronic slave device refers to any device that is configured to perform a function according 
to data provided by a master device such as a computer. For example, an electronic slave 
device may comprise a tool or sensor implemented in a petroleum mining system. 
[0013] In at least some embodiments, a redundancy manager device coupled between the 
electronic slave device and a plurality of master devices may provide redundant data 
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communication to one or more electronic slave devices. The redundancy manager device is 
preferably configurable to selectively forward data from one of the plurality of master 
devices to the slave device. The master device associated with the data that is forwarded to 
the slave device is said to have "mastership" of the slave device. Preferably one master 
device has mastership of the slave device while the other master devices are "idle" masters 
devices. Implementing the redundancy manager device in such a system is intended to 
provide several benefits. For example, the redundancy manager may improve the reliability 
and availability of data communications to a slave device, simplify redundant system designs, 
provide low cost system redundancy, permit high-speed communication between a master 
device and a slave device and/or provide other benefits. 

[0014] Figure 1 illustrates a system 100 in accordance with preferred embodiments of the 
invention. In particular, the system 100 illustrates a redundancy manager device 106 
implemented in a petroleum mining system. As shown in Figure 1, the system 100 may 
comprise a redundancy manager 106 coupled to a first master device 102 and a second 
master device 104. The redundancy manager 106 also may couple to a modem 108. As 
shown in Figure 1, the modem 108 may couple to a subsea tool 110. 

[0015] In at least some embodiments, the redundancy manager 106 is operable to examine a 
data stream 112 received from the first master device 102. The data stream 112 may 
comprise, for example, data packets of encoded information such as a sender address (i.e., an 
address assigned to the first master device 102), a recipient address (i.e., an address assigned 
to the subsea tool 110), a command, data, and CRC (cyclic redundancy check) information. 
The redundancy manager 106 is further operable to examine a data stream 1 14 received from 
the second master device 104. The data stream 114 also may comprise data packets of 
encoded information as described above. 

[0016] The redundancy manager 106 preferably forwards one of the data streams 112 and 
1 14 to the modem 108. The modem prepares the data stream received from the redundancy 
manager 106 for transmission to the subsea tool 110. Hereinafter the data stream output from 
the redundancy manager 106 will be referred to as the redundancy manager output (RMO) 
data. 

[0017] The modem 108 may implement frequency modulation and/or phase modulation 
techniques to prepare the RMO data. Thereafter, the RMO data may be transmitted to the 
subsea tool 110 as a modulated analog signal via an electrical conductor 114. In at least 
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some embodiments, the electrical conductor 114 may comprise a cable (e.g., a coaxial cable, 
a shielded twisted pair) that is several kilometers in length. 

[0018] The subsea tool 110 may receive the modulated analog signal via the electrical 
conductor 114 and recover the RMO data using digitization, demodulation, decoding and/or 
other techniques. The RMO data may cause the subsea tool 110 to perform one or more 
functions such as operating a motor, operating an actuator, outputting sensor measurements, 
etc. Alternatively, the subsea tool 1 10 may ignore the RMO data as will later be described. 
[0019] The subsea tool 110 also may function to transmit a data stream 118 to the first 
master device 102 and the second master device 104. The data stream 118 may comprise 
data packets of encoded information such as a sender address (i.e., the address of the subsea 
tool 110), a recipient address (i.e., an address assigned to the first master device 102 or the 
second master device 104), data, and CRC (cyclic redundancy check) information. 
Preferably, the recipient address of each data packet of the data stream 118 corresponds to the 
sender address of each data packet received by the subsea tool 1 10. 

[0020] Both the first master device 102 and the second master device 104 may receive and 
examine the data stream 118 using digitization, demodulation, and decoding techniques. The 
data stream 118 may provide several types of information to the first master device 102 and 
the second master device 104. For example, the data stream 118 may include sensor data, 
subsea tool health information, a verification of received commands and/or data, a response 
to a query, or other information. 

[0021] As previously explained, the redundancy manager 106 may select one of the data 
streams 112 and 114 to be forwarded to the subsea tool 110. The redundancy manager's 
selection to forward the first data stream 1 12 or the second data stream 114 may be based on 
a variety of factors such as whether the first master device 102 is functioning properly, 
whether the second master device 104 is functioning properly, whether the first master device 
102 has requested to transfer mastership, whether the second master device 104 has requested 
to transfer mastership, timing considerations, or other factors. 

[0022] In at least some embodiments, the redundancy manager 106 may be initially 
configured to forward the first data stream 112. If the redundancy manager 106 determines 
that the first data stream 1 12 is invalid, then the second data stream 1 14 may be forwarded to 
the subsea tool 110. Additionally, if the second master device 104 requests mastership, the 
redundancy manager 106 may forward the second data stream 114 to the subsea tool 110. 
The second master device 104 may request mastership using a predetermined command 
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transmitted to the redundancy manager 106 via the second data stream 114. The second 
master device 104 also may request that mastership be transferred to the first master device 
102 using another predetermined command transmitted to the redundancy manager 106 via 
the second data stream 1 14. 

[0023] Preferably, the redundancy manager 106 operates to examine the data streams 112 
and 114, but does not alter, store, or buffer the data streams 112 and 114. Therefore, a 
command to transfer mastership (or other non-slave commands), may be detected by the 
redundancy manager 106, but still may be forwarded to the subsea tool 110. Preferably, 
commands to transfer mastership have no significance to the subsea tool 110 and are ignored. 
Alternatively, the subsea device 1 10 may at least confirm that the command was received by 
transmitting a response to the master devices via the data stream 118. 

[0024] In at least some embodiments, the master devices 102 and 104 may request to transfer 
mastership as controlled by a user and/or in response to the content of the data stream 118. 
For example, a user that does not have access to the first master device 102 (e.g., the master 
devices 102 and 104 may be far away from each other) may wish to transmit information to 
the subsea tool 110 using the second master device 104. Therefore, the user may access the 
second master device 104 and provide input (e.g., via a keyboard and/or a mouse) to request 
that the mastership be transferred from the first master device 102 to the second master 
device 104. Furthermore, a user of the second master device 104 may want to transfer 
mastership from the second master device 104 to the first master device 102. For example, 
the second master device 104 require servicing or may be needed to perform tasks other than 
communicating with the subsea tool 1 10. 

[0025] The second master device 104 also may request mastership in response to the content 
of the data stream 118. For example, the data stream 118 may comprise data packets, each 
including a destination address and confirmation information (i.e., information that confirms 
that a command and/or data was received). If the destination address indicates that the 
subsea tool 1 10 received a data packet from the first master device 102 and the confirmation 
information indicates that the command and/or the data is not valid, the second master device 
104 may request that mastership be transferred from the first master device 102 to the second 
master device 104. 

[0026] Additionally or alternatively, the second master device 104 may request mastership 

when no data stream 118 is transmitted by the subsea device 110. The absence of the data 

* 

stream 118 may be an indication that the first master device 102 is not effectively 
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communicating with the subsea device 110. In at least some embodiments, the second master 
device 104 may be configured to wait for a predetermined amount of time after recognizing 
an input from a user to transfer mastership or after recognizing potential communication 
problems between the first master device 102 and the subsea tool 110 before transmitting a 
mastership transfer command to the redundancy manager 106. 

[0027] Likewise, the first master device 102 may request mastership as controlled by a user 
and/or in response to the content of the data stream 118 in the same or similar fashion as 
described above for the second master device 104. 

[0028] If neither of the data streams 1 12 and 1 14 are valid, the redundancy manager 106 may 
cycle between forwarding the first data stream 112 and the second data stream 114 until a 
valid data stream is discovered. The cycling may occur at a predetermined frequency such as 
every fifteen seconds. 

[0029] Figure 2 illustrates a block diagram of a redundancy manager 106 in accordance with 
preferred embodiments of the invention. As shown in Figure 2, the redundancy manager 106 
may comprise a first processor 120 coupled to a second processor 122. The first processor 
120 may comprise a memory 123 that stores computer-readable instructions 127. When 
executed by the first processor 120, the computer-readable instructions 127 preferably cause 
the first processor 120 to manage a switching device 124 and communicate with the second 
processor 122 as will later be described. The second processor 122 also may comprise a 
memory 125 that stores computer-readable instructions 129. When executed by the second 
processor 122, the computer-readable instructions 129 preferably cause the second processor 
122 to communicate with the first processor 120 as will later be described. 
[0030] As shown in Figure 2, the first processor 120 may couple to the first master device 
102 and may receive the first data stream 112 as input. Likewise, the second processor 122 
may couple to the second master device 104 and may receive the second data stream 114 as 
input. The switching device 124 may couple to the first master device 102 and the second 
master device 104 and may receive the data streams 112 and 114 as input, whereby the 
switching device 124 forwards one of the data streams 112 and 114 to an electrical slave 
device such as the subsea tool 1 10 of Figure 1 . 

[0031] In at least some embodiments, execution of the computer-readable instructions 127 
may cause the first processor 120 to examine the first data stream 112 and determine if the 
first data stream 112 contains any errors such as invalid commands, addresses, data, etc. If 
the first processor 120 detects an error in the first data stream 112 (or if the first data stream 
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112 is not provided), the first processor 120 may assert a signal 135 to the switching device 
124. In response to the signal 135 being asserted, the switching device 124 may forward the 
second data stream 114 instead of the first data stream 112 to a slave device. Additionally, 
execution of the computer-readable instructions 127 may cause the first processor 120 to wait 
a predetermined amount of time or detect a threshold number of errors before asserting the 
signal 135. 

[0032] Furthermore, execution of the computer-readable instructions 127 may cause the first 
processor 120 to assert and de-assert the signal 135 in response to mastership transfer 
commands from the first master device 102. In some embodiments, two mastership transfer 
commands (hereinafter referred to as the M l-to-2 command" and the "2-to-l command") may 
be implemented. The l-to-2 command preferable causes the mastership to change from the 
first master device 102 to the second master device 104, while the 2-to-l command causes 
the mastership to change from the second master device 104 to the first master device 102. 
[0033] As an example, the first master device 102 may be configured to execute various 
applications in addition to providing the first data stream 112. Therefore, if the first master 
device 102 is overburdened with tasks, occupied with performing a high priority task, or is 
otherwise unable to satisfactorily provide the first data stream 112 to the subsea tool 110, the 
first master device 102 may send the l-to-2 command to the first processor 120 via the first 
data stream 112. In response to receiving the l-to-2 command, the first processor 120 may 
assert the signal 135 thereby causing the switching device 124 to transfer mastership from the 
first master device 102 to the second master device 104. 

[0034] Alternatively, the first master device 102 may send the 2-to-l command to the first 
processor 120. For example, the 2-to-l command may be sent when the first master device 
102 examines a data stream (e.g., the data stream 118) from the slave device and determines 
that the second master device 104 is not effectively communicating with and/or controlling 
the slave device. In response to receiving the 2-to-l command, the first processor 120 may 
de-assert the signal 135 causing the mastership to change from the second master device 104 
to the first master device 102. 

[0035] In at least some embodiments, the signal 135 need not be continually asserted to 
provide mastership to the second master device 104 or continually de-asserted to provide 
mastership to the first master device 102. For example, the signal 135 may comprise a pulse 
signal transmitted by the first processor 120. Therefore, the switching device 124 may be 
configured to respond to one or more pulses by switching mastership to either the first master 

123144.01/1600.09700 n 



device 102 or the second master device 104 (e.g., one pulse may correspond to the first 
master device 102 and two pulses may correspond to the second master device 104). 
Alternatively, the switching device 124 may be configured to switch upon receive each 
consecutive pulse signal. 

[0036] As shown in Figure 2, the switching device 124 may comprise a relay 128 coupled 
between a relay drive 126 and a switch 130. In at least some embodiments, the relay drive 
126 is configured to receive the signal 135. In response to an assertion of the signal 135, the 
relay drive 126 may provide power to the relay 128, which may comprise, for example, an 
electro-mechanical relay. Upon receiving power, the relay 128 may cause the switch 130 to 
forward the second data stream 1 14 to the subsea tool 1 10 instead of the first data stream 1 12. 
For example, the relay 128 may cause a metal contact 129 coupled to the subsea tool 110 to 
shift between contacting a conductor carrying the first data stream 112 and a conductor carry 
the second data stream 1 14. 

[0037] While some switch device 124 embodiments may comprise the relay drive 126, the 
relay 128, and switch 130 as described above, other switch device 124 embodiments are 
available. For example, the switch device 124 may comprise a solid-state (semiconductor) 
switch. As implemented herein, the switch device 124 may comprise any electronic switch 
or electro-mechanical switch. 

[0038] As explained above, the first processor 120 may control the switching device 124 
according to several factors such as the validity of the first data stream 112 and mastership 
transfer commands received from the first master device 102. In addition, the first processor 
120 may control the switching device 124 according to input received from the second 
processor 122. A description of the operation of the second processor 122 is given below. 
[0039] The second processor 122 may be configured to execute the computer-readable 
instructions 129. In at least some embodiments, execution of the computer-readable 
instructions causes the second processor 122 to examine the second data stream 114 and 
determine if the second data stream 114 contains any errors such as invalid commands, 
addresses, data, etc. If the second processor 122 detects an error in the second data stream 
1 14 (or if the second data stream 1 14 is not provided), the second processor 120 may assert a 
signal ("H2" or "health of master 2") to the first processor 120 that indicates when the second 
master device 104 is not functioning correctly. 

[0040] Execution of the computer-readable instructions 129 may further cause the second 
processor 122 to assert signals (shown as "XI" and "X2" in Figure 2) to the first processor 
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120 when the second master device 104 transmits mastership transfer commands to the 
second processor 122 via the second data stream 114. As described previously, two 
mastership transfer commands referred to as the l-to-2 command and the 2-to-l command 
may be implemented. 

[0041] In similarity to the first master device 102, the second master device 104 may be 
configured to execute various applications in addition to providing the second data stream 
114. Therefore, if the second master device 104 is overburdened with tasks, occupied with 
performing a high priority task, or is otherwise unable to satisfactorily provide the second 
data stream 114 to a slave device, the second master device 104 may send the 2-to-l 
command to the second processor 122. In response to receiving the 2-to-l command, the 
second processor 122 may assert the XI (transfer to master 1) signal to the first processor 
120. In response to the asserted the XI signal, the first processor 120 may de-assert the 
signal 135, thereby causing the switching device 124 to transfer mastership from the second 
master device 104 to the first master device 102. 

[0042] Alternatively, the second master device 104 may send the l-to-2 command to the 
second processor 122. For example, the l-to-2 command may be sent when the second 
master device 104 examines a data stream (e.g., the data stream 1 18 shown in Figure 1) from 
the slave device and determines that the first master device 102 is not effectively 
communicating with and/or controlling the slave device. In response to receiving the l-to-2 
command, the second processor 122 may assert the X2 (transfer to master 2) signal to the 
first processor 120. In response to the asserted X2 signal, the first processor 120 may assert 
the signal 135, thereby causing the switching device 124 to transfer mastership from the first 
master device 102 to the second master device 104. 

[0043] In at least some embodiments, execution of the computer-readable instructions 127 
may cause the first processor 120 to sample the H2, XI, and X2 signals at a programmable 
rate (e.g., once every second). After the first processor 120 has sampled the H2, XI, and X2 
signals, a reset signal ("RS") may be transmitted to the second processor 122, which may 
cause the second processor 122 to reset (de-assert) any asserted H2, XI, and X2 signal. The 
assertion or reassertion of the H2, XI, and X2 signals may occur as described above. 
[0044] In summary, the first processor 120 may consider several factors, such as those 
described above, to manage the switching device 124 such that the first data stream 112 or 
the second data stream 114 is forwarded to the subsea tool 110. In at least some 
embodiments, the first processor 120 may manage the switching device 124 according to a 
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prioritization of the health (functional condition) of the master devices 102 and 104, the 
mastership transfer commands received from the master devices 102 and 104, and timing 
considerations. 

[0045] The health of the master devices 102 and 104 may be given first priority and may be 
indicated to the first processor 120 according to an examination of the first data stream 112 
and the H2 signal described above. The mastership transfer commands may be given second 
priority and may be indicated to the first processor 120 according to the l-to-2 command, the 
2-to-l command, the XI signal, and the X2 signal described above. The timing 
considerations may be given third priority and may be indicated to the first processor 120 by 
timers that are controlled according to the computer-readable instructions 127. Preferably, 
the timing considerations permit the first processor 120 to control the switching device 124 
such as to maximize the amount of time during which the slave device receives valid 
commands and/or data. 

[0046] In particular, the timing considerations may be beneficial when both of the data 
streams 112 and 114 are indicated to be invalid. In such case, the downtime of 
communication between the master devices 102 and 104 and the slave device may be 
minimized by successively switching between transferring the first data stream 112 and the 
second data stream 114 until one of the data streams 112 and 114 is determined to be valid. 
Thereafter, the valid data stream may be forwarded until the switching device 124 is 
instructed otherwise. 

[0047] The timing considerations also may be beneficial when multiple mastership transfer 
commands are received within a threshold amount of time. In such case, it may not be 
desirable to switch back and forth between forwarding the first data stream 112 and the 
second data stream 1 14. For example, if the both of the data streams 112 and 1 14 are valid, 
then switching between forwarding the first data stream 112 and the second data stream 114 
may result in a lower data transfer rate than would exist otherwise. The lower data transfer 
rate may result from latency associated with operating the switching device 124. Therefore, 
the timing considerations may prevent mastership transfer commands from being performed 
if doing so is calculated to improve the overall efficiency of communicating to the slave 
device. 

[0048] As shown in Figure 2, the redundancy manager 106 also may comprise monitoring 
units 132 and 136. The monitoring units 132 and 136 may comprise one or more electrical- 
based indicators 134. For example, the electrical-based indicators 134 may comprise light 
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emitting diodes (LEDs). The indicators 134 preferably permit a user to easily inspect the 
various functions of the redundancy manager 106. For example, the monitoring unit 132 may 
comprise indicators 134 associated with the health of the first master device 102 ("HI"), the 
health of the second master device 104 ("H2"), the health of the first processor 120 ("HP1"), 
the health of the second processor 122 ("HP2"), the first data stream 112 being forwarded 
("Fl"), and the second data stream 114 being forwarded ("F2"). The monitoring unit 136 
may comprise an indicator 134 associated with the assertion and de-assertion of the signal 
135 ("SW"). 

[0049] Figure 3 illustrates another petroleum mining system 150 in accordance with 
preferred embodiments of the invention. As shown in Figure 3, the system 150 may 
comprise a first master device 102 and a second master device 104 each coupled to two 
redundancy managers 106 A and 106B. The redundancy managers 106 A and 106B may each 
couple to a modem ("MODEM Al" 108 A and "MODEM Bl" 108B respectively). The 
modems 108 A and 108B may couple to a subsea tool 180 via the conductors 1 16A and 1 16B. 
The master devices 102 and 104, the redundancy managers 106 A and 106B, and the modems 
108A and 108B may function in the same or similar fashion as the master devices 102 and 
104, the redundancy manager 106, and the modem 108 described in Figures 1 and/or 2. 
[0050] The exemplary embodiment of Figure 3 illustrates that an increased number of data 
paths (i.e., paths associated with first data stream 1 12, the second data stream 1 14, the RMO 
data, and the data stream 118) may be implemented to further increase the reliability of 
successful communication to the subsea tool 180. 

[0051] Figure 4 illustrates a dual-redundant tool 180 that may be implemented with the 
system 150 of Figure 3. As shown in Figure 4, the tool 180 may comprise a modem 
("MODEM A2") 182A that is operable to receive a signal from the MODEM Al 108 A. The 
tool 180 may further comprise a modem ("MODEM B2") 182B that is operable to receive a 
signal from the MODEM Bl 108B. The modems 182A and 182B may digitize, demodulate, 
and decode data streams received from the master devices 102 and 104. The data streams 
may be provided to sensors 184 A and 184B. The sensors 184 A and 184B are preferably 
independent from each other and provide sensor data in response to environment input. The 
sensor data may be transmitted to the master devices 102 and 104 via the modems 108 A and 
108B. The data streams also may be provided to controllers 186 A and 186B. The controllers 
186 A and 186B are preferably independent from each other and may be associated with 
valves, actuators, motors, or other functions of the tool 180. As shown, the controllers 186 A 
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and 186B may receive analog input signals and may provide an output function (e.g., 
controlling a drill, actuator, valve, or other device). 

[0052] Figure 5 illustrates a method 500 in accordance with preferred embodiments of the 
invention. As shown in Figure 5, the method 500 may comprise receiving a plurality of data 
streams from two or more master devices (block 502). The method 500 further comprises 
checking the validity of the data streams at block 504. If there is not a valid data stream as 
determined at block 506, the data streams may be forwarded in a cycled (switching back and 
forth) fashion (block 508). For example, the data streams may be forwarded via a relay that 
is able to forward one of the plurality of data streams at a time according to a setting of the 
relay. If none of the data streams are valid, the relay may forward each data stream in turn 
according to a predetermined pattern and timing. The method 500 may then return to block 
506 to determine if there is a valid data stream. 

[0053] When a data stream is valid as determined at block 506, a relay may be set to forward 
the valid data stream (block 510). Thereafter, a determination is made as to whether a 
request to transfer mastership to a healthy master has occurred (block 512). If, at block 512, 
a determination is made that no request to transfer mastership to a healthy master has 
occurred, the valid data stream may be forwarded via the relay (block 518). If, at block 512, 
a determination is made that a request to transfer mastership to a healthy master has occurred, 
then a determination is made as to whether the request to transfer mastership to a healthy 
master occurred within a threshold amount of time (block 514). 

[0054] If, at block 514, a determination is made that the request to transfer mastership to 
a healthy master occurred within the threshold amount of time, the valid data stream may 
be forwarded via the relay (block 518). If, at block 514, a determination is made that the 
request to transfer mastership to a healthy master did not occur within the threshold 
amount of time, the relay may be set to transfer mastership according to the request 
(block 516). Thereafter, a valid data stream (from a healthy master device having 
mastership) may be forwarded via the relay (block 518). The method 500 may be 
repeated continually to provide efficient, redundant communication from the master 
devices to one or more slave devices. 

[0055] The above discussion is meant to be illustrative of the principles and various 
embodiments of the present invention. Numerous other variations and modifications will 
become apparent to those skilled in the art once the above disclosure is fully appreciated. 
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It is intended that the following claims be interpreted to embrace all such variations and 
modifications. 
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